Processing of Personal Data
Privacy Policy on Recruitment and the Processing of Personal Data
We consider the assurance of your right to personal data protection as a fundamental commitment of both you and Strategic HR Outsourcing SRL – operating under the name recrutare-hr.ro. Therefore, we dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (the “General Data Protection Regulation” or “GDPR”) and any other applicable legal provisions in Romania. As transparency is one of the core principles of this legal framework, we have prepared this document to inform you about how we collect, use, transfer, and protect your personal data when you interact with us in relation to our products and services, including through our website or mobile applications.
We reserve the right to update and amend this Privacy Policy periodically to reflect any changes in the way we process your personal data or any changes in legal requirements. In case of any such changes, we will display the updated version of the Privacy Policy on our website. Therefore, we kindly ask you to review the content of this Privacy Policy regularly.
Who We Are and How You Can Contact Us
Recrutare-hr.ro is the trade name of Strategic HR Outsourcing SRL, a Romanian legal entity, headquartered in Vladimirescu, Arad County, 61 Bisericii Street, postal code 317405. It is registered at the Trade Registry under number J2/260/17.02.2023 and has fiscal registration number RO47661904 (hereinafter “recrutare-hr.ro” or “we”). Under data protection legislation, we are considered the data controller when processing your personal data.
We are always open to hearing your views, and we are ready to provide any additional information you may need regarding the processing of your data. You can contact our Data Protection Officer by email at info@recrutare-hr.ro, or by post/courier at the following address: Arad County, Vladimirescu, 61 Bisericii Street, with the mention “To the attention of the Data Protection Officer”.
What Categories of Personal Data We Process
InÎn general, colectăm datele dumneavoastră personale direct de la dumneavoastră, oferindu-vă astfel controlul asupra tipului de informație pe care o furnizați. De exemplu, atunci când vă creați un cont, ne transmiteți adresa de email, numele și prenumele.
Pe pagina dumneavoastră personală (Contul meu) din platformă, aveți posibilitatea să adăugați informații suplimentare, precum: fotografie, gen, nickname, număr de telefon mobil, număr de telefon fix, data nașterii, nivelul educațional, adrese de livrare, adresă alternativă de email, datele cardului bancar etc.
Când plasați o comandă, ne furnizați informații precum: produsul dorit, numele și prenumele, adresa de livrare, detalii de facturare, metoda de plată, număr de telefon, datele cardului bancar etc.
De asemenea, vă oferim opțiunea de a vă înregistra prin contul dumneavoastră Facebook sau Google. Dacă alegeți una dintre aceste opțiuni, veți fi redirecționat către o pagină administrată de Facebook Inc. sau Google LLC, unde veți fi informat cu privire la transferul datelor dumneavoastră. Puteți consulta politicile de confidențialitate ale Facebook și Google la următoarele linkuri:
De asemenea, putem colecta și prelucra informații legate de comportamentul dumneavoastră în timpul vizitei pe site-ul nostru sau utilizării aplicației mobile, pentru a personaliza experiența online și a vă oferi oferte adaptate profilului dumneavoastră. Detalii suplimentare pot fi găsite în secțiunea privind scopurile prelucrării de mai jos.
Pe site-ul nostru web și în aplicația mobilă, putem stoca și colecta informații prin intermediul cookie-urilor și tehnologiilor similare, conform Politicii de Cookie-uri.
Nu colectăm și nu prelucrăm date sensibile, conform Regulamentului general privind protecția datelor. De asemenea, nu dorim să colectăm sau să prelucrăm date ale minorilor care nu au împlinit vârsta de 16 ani.
What Categories of Personal Data We Process
Generally, we collect personal data directly from you, giving you control over the information you provide. For example, when creating an account, you provide your name and email address.
In your personal account (“My Account”), you may add additional information such as your photo, gender, nickname, mobile/landline phone number, birthdate, educational level, delivery addresses, alternative email address, bank card details, etc.
When placing an order, you provide information such as the desired product, name, delivery address, billing details, payment method, phone number, and card data.
You may also register via Facebook or Google. If you choose this option, you will be redirected to a page managed by Facebook Inc. or Google LLC, where you will be informed about the data transfer. You can read their privacy policies here:
We may also collect and process data about your behavior while visiting our site or using the mobile app to personalize your experience and offer tailored promotions. See the section below for more information on the purposes of processing.
Our website and mobile app may store and collect information through cookies and similar technologies, according to our Cookie Policy.
We do not collect or process sensitive data as defined by the GDPR. We also do not knowingly collect data from children under the age of 16.
For Improving Our Services
We are constantly striving to offer you the best online shopping experience. To achieve this, we may collect and use certain information related to your behavior as a Buyer. We may invite you to complete satisfaction surveys following the completion of an order. We may also conduct, directly or through partners, market research and studies.
We base these activities on our legitimate interest in conducting commercial activities, always ensuring that your fundamental rights and freedoms are not adversely affected.
For Marketing Purposes
We want to keep you informed about the best offers on products/services that interest you. For this purpose, we may send you any type of message (e.g., email/SMS/phone/mobile push/web push, etc.). These may contain general or thematic information, information about similar or complementary products to those you’ve already purchased.
Additionally, we may send you information about offers or promotions, products added to your “Account/My Cart” or “Account/Favorites” sections, or products you’ve shown interest in purchasing, as well as other commercial communications such as market research and opinion surveys. We may also display personalized recommendations on the website and in the mobile app. In order to provide you with relevant information, we may use certain data regarding your shopping behavior (e.g., viewed products / added to wishlist / purchased) to create a profile. We always ensure that such processing is carried out in compliance with your rights and freedoms. Decisions based on this profiling do not have legal effects on you nor significantly affect you in a similar way.
In most cases, we rely on your prior consent to send marketing communications. You may withdraw your consent at any time by:
- Changing your preferences in the “My Subscriptions” section of your account;
- Clicking the unsubscribe link provided in the messages you receive from us;
- Contacting us using the contact details provided above.
In certain situations, we may rely on our legitimate interest to promote and develop our business. In any case where we use your information based on our legitimate interest, we take all necessary precautions to ensure your fundamental rights and freedoms are not affected. However, you may request at any time, using the methods described above, that we cease processing your personal data for marketing purposes, and we will comply with your request.
For Protecting Our Legitimate Interests
There may be situations in which we use or share information to protect our rights and business operations. These measures may include:
- Protection of the website and platform users against cyberattacks;
- Prevention and detection of fraud attempts, including sharing information with competent public authorities;
- Managing other types of risks.
The general legal basis for these types of processing is our legitimate interest in defending our business. We also ensure that any measures we take strike a balance between our interests and your fundamental rights and freedoms.
Additionally, in certain cases, we rely on legal obligations, such as the obligation to ensure the security of assets and valuables.
How Long We Keep Your Personal Data
As a general rule, we store your personal data as long as you have an account on our platform. You can request the deletion of certain data or account closure at any time, and we will comply with your request, subject to retaining certain information even after account closure if required by applicable law or legitimate interest.
To Whom We Share Your Personal Data
We may, where appropriate, share or grant access to some of your personal data to the following categories of recipients:
- Companies within the same group;
- Partners;
- Courier services;
- Payment/banking services;
- Marketing/telemarketing service providers;
- Market research services;
- Insurance companies;
- IT service providers;
- Other companies with whom we may jointly develop programs to offer our goods and services on the market.
Where we have a legal obligation or it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.
We ensure that third-party access to your data is done in accordance with legal data protection and confidentiality requirements, based on contracts concluded with these entities.
Where We Transfer Your Personal Data
Currently, we store and process your personal data in Romania.
However, we may transfer some of your data to entities located in the European Union or outside the EU, including countries that are not recognized by the European Commission as providing an adequate level of personal data protection.
We will always take measures to ensure that any international data transfer is handled carefully to protect your rights and interests. Transfers to service providers and third parties will always be protected by contractual commitments and, where applicable, other safeguards such as the Standard Contractual Clauses issued by the European Commission or certification schemes such as the Privacy Shield (for transfers from the EU to the USA).
You may contact us anytime using the above contact details for more information about the countries where we transfer your data and the safeguards we have put in place for such transfers.
How We Protect the Security of Your Personal Data
We are committed to ensuring the security of your personal data by implementing appropriate technical and organizational measures, in accordance with industry standards.
Your data is transmitted using state-of-the-art encryption algorithms and stored on secure servers, ensuring data redundancy.
For payments, we use the services of payment processors such as PayU, Netopia MobilPay, EuPlatesc. Any payment-related information is encrypted using HTTPS with TSL 1.2 encryption technology.
Despite the measures taken to protect your personal data, we draw your attention to the fact that data transmission over the Internet or other public networks is not completely secure, and there is a risk that the data may be viewed and used by unauthorized third parties. We cannot be held responsible for such vulnerabilities in systems not under our control.
Your Rights
The General Data Protection Regulation grants you several rights regarding your personal data. You can request access to your data, correct any errors in our files, and object to the processing of your personal data. You also have the right to file a complaint with the competent supervisory authority or take legal action. In some cases, you may request the deletion of your personal data, restrict processing, or exercise your right to data portability.
More details about each of these rights can be found in the table below.
To exercise your rights, please contact us using the details provided above. Note the following:
Identity Verification
We take the confidentiality of all personal data records seriously. Therefore, please send your requests using the email address linked to your account on recrutare-hr.ro. Otherwise, we reserve the right to verify your identity by requesting additional information.
Fees
We will not charge you for exercising your rights unless your request is unfounded, repetitive, or excessive. In such cases, we may charge a reasonable fee and will notify you in advance.
Response Time
We aim to respond to any valid requests within one month. If a request is particularly complex or you’ve submitted multiple requests, this period may be extended to two months. We’ll let you know if an extension is needed and may ask for clarification to help us respond more efficiently.
Third-Party Rights
We are not obliged to comply with a request if it would adversely affect the rights and freedoms of other data subjects.
| Targeted rights | Description |
| Access | You may request the following from us: confirmation as to whether or not we are processing your personal data; access to a copy of your personal data; and additional information about your personal data, such as what data we hold, how we use it, to whom we disclose it, whether we transfer it abroad and how we protect it, how long we retain it, what rights you have, how you can file a complaint, and where we obtained your data from — to the extent that such information has not already been provided to you through this notice. |
| Rectification | You may ask us to rectify or complete your inaccurate or incomplete personal data. We may need to verify the accuracy of the data before making any corrections. |
| Data Deletion | You may request that we delete your personal data, but only in the following circumstances: the data is no longer necessary for the purposes for which it was collected; or you have withdrawn your consent (where data processing was based on consent); or you are exercising a legal right to object; or the data has been processed unlawfully; or we are under a legal obligation to erase it. We are not required to comply with your request to delete your personal data if the processing is necessary: to comply with a legal obligation; or for the establishment, exercise, or defense of legal claims. There may be other situations in which we are not obligated to comply with your deletion request, although these are the most likely reasons for which we may refuse such a request. Please note that before exercising this right, you should download from your account on recrutare-hr.ro and save all documents related to your orders, regardless of whether the invoicing was done in your name or in the name of another individual or legal entity (such as invoices, warranty certificates). If you do not take this step before exercising your right to erasure, you will lose access to these documents, and the platform will be unable to provide them to you afterward, as the deletion process of your data and account, including all associated documents, is irreversible. |
| Restriction of Data Processing | You may ask us to restrict the processing of your personal data, but only in the following situations: the accuracy of the data is contested (see the rectification section), allowing us time to verify its accuracy; or the processing is unlawful but you do not wish the data to be deleted; or the data is no longer needed for the purposes for which it was collected, but you require it to establish, exercise, or defend a legal claim; or you have exercised your right to object and a verification of whether our legitimate grounds override yours is ongoing. We may continue to use your personal data following a restriction request if: we have your consent; or it is necessary to establish, exercise, or defend a legal claim; or it is required to protect our rights or the rights of another individual or legal entity. |
| Data Portability | You may ask us to provide your personal data in a structured, commonly used, and machine-readable format, or you may request that it be “ported” directly to another data controller, but in each case only if: the processing is based on your consent or on the conclusion or performance of a contract with you; and the processing is carried out by automated means. |
| Objection | You may object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest, if you believe that your fundamental rights and freedoms outweigh that interest. You may also object at any time to the processing of your personal data for direct marketing purposes (including profiling), without having to provide any reason, in which case we will cease such processing as soon as possible. |
| Automated Decision Making | You may request not to be subject to a decision based solely on automated processing, but only when that decision: produces legal effects concerning you; or similarly and significantly affects you. This right does not apply if the automated decision: is necessary for entering into or performing a contract with you; is authorized by law and adequate safeguards for your rights and freedoms are in place; or is based on your explicit consent. |
| Complaints | You have the right to file a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the contact details of the supervisory authority for data protection are as follows: National Supervisory Authority for Personal Data Processing B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania Phone: +40.318.059.211 or +40.318.059.212 Email: anspdcp@dataprotection.ro Without affecting your right to contact the supervisory authority at any time, please contact us in advance, and we promise to make every effort to resolve any issues amicably. |
Contacting the Data Protection Officer
- You may contact our Data Protection Officer at any time via:
- Email: info@recrutare-hr.ro
- Mail or courier: County Arad, Vladimirescu, Strada Bisericii no. 61, postal code 317405, with the mention: “To the attention of the Data Protection Officer – recrutare-hr.ro”
To better understand where and when we use your data, you can visit the non-EU recruitment services page.